Lucene search
+L

6104 matches found

OSV
OSV
•added 2025/12/30 1:49 a.m.•13 views

GO-2025-4264 Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries in code.gitea.io/gitea

Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries in code.gitea.io/gitea...

5.3CVSS6.6AI score0.00276EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper channel scope checking, which could lead to registration failure...

6.1AI score0.002EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/12/26 5:15 p.m.•13 views

CVE-2025-68944

A flaw was found in Gitea, a self-hosted Git service. This vulnerability allows an authenticated user to bypass access controls within its package registries. This occurs because the system improperly handles the propagation of token scope, which defines what actions a token is allowed to perform...

5.3CVSS5.9AI score0.00276EPSS
SaveExploits0References6
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•7 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•7 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/26 6:30 a.m.•19 views

GHSA-F85H-C7M6-CFPM Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...

5CVSS6.9AI score0.00276EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•5 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•12 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/12/26 6:30 a.m.•22 views

Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...

5.3CVSS7AI score0.00276EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•1 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•8 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/26 6:30 a.m.•10 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the propagation of token scope for access control within Gitea's package registry. An attacker can gain unauthorized access or perform actions beyond their intended permissions by exploiting improper enforceme...

6.4CVSS7AI score0.00276EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/26 4:15 a.m.•14 views

CVE-2025-68944

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...

5.3CVSS0.00276EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/26 3:37 a.m.•47 views

CVE-2025-68944

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...

5CVSS0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/26 3:37 a.m.•6 views

CVE-2025-68944

Gitea before 1.22.2 sometimes mishandles the propagation of token scope for access control within one of its own package registries...

5CVSS6.6AI score0.00276EPSS
SaveExploits0References3
Rows per page
Query Builder